Blackberry WebKit Browser Engine Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
BlackBerry PlayBook Tablet Software 2.0.0.7971
BlackBerry PlayBook Tablet Software 1.0.8.6067
BlackBerry PlayBook Tablet Software 1.0.5.2304
BlackBerry PlayBook Tablet Software 1.0.8.4985
BlackBerry PlayBook Tablet Software 1.0.7.3312
BlackBerry PlayBook Tablet Software 1.0.7.2942
BlackBerry PlayBook Tablet Software 1.0.6
BlackBerry PlayBook Tablet Software 1.0.5.2342
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52288

Blackberry WebKit Browser is the official Webkit Browser of Blackberry.

The Blackberry WebKit Browser has a remote code execution vulnerability. Attackers can exploit this vulnerability to execute arbitrary code by enticing users to view malicious content. Affected Versions: BlackBerry PlayBook browser, Bridge Browser, Android Runtime, Messages app (BlackBerry PlayBook 2.0 only), and BlackBerry Bridge email app.

<* Source: RSA Security Conference

Link: http://btsc.webapps.blackberry.com/btsc/microsites/microsite.do? Cmd = displayKC & docType = kc & externalId = KB30152 & sliceId = 1 & docTypeID = DT_SECURITY_1_1

*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

BlackBerry
----------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://www.blackberry.com/